Vulnerability Intelligence · Watchlist
The CVE Watchlist, Under Review.
Scored between the two publication thresholds. Each moves up the moment new exploitation evidence arrives.
Synced hourly · figures as of Oct 20, 2026
755 vulnerabilities · highest score first
- CVE-2025-4978Critical 9.3A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA.netgear · dgnd3700 firmwareEPSS21%1 exploitPublished May 20, 2025
- CVE-2024-38289Critical 9.8A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input.rhubcom · turbomeetingEPSS41%1 exploitPublished Jul 25, 2024
- CVE-2024-29974Critical 9.8UNSUPPORTED WHEN ASSIGNED The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute arbitrary code…zyxel · nas326 firmwareEPSS23%·Published Jun 7, 2024
- CVE-2024-24116Critical 9.8An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.ruijie · rg-nbs2009g-p firmwareEPSS28%1 exploitPublished Oct 2, 2024
- CVE-2023-34800Critical 9.8D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.dlink · go-rt-ac750 firmwareEPSS28%1 exploitPublished Jun 15, 2023
- CVE-2022-46476Critical 9.8D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.dlink · dir-859 a1 firmwareEPSS41%1 exploitPublished Jan 19, 2023
- CVE-2022-28573Critical 9.8D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting.dlink · dir-823 pro firmwareEPSS28%1 exploitPublished May 2, 2022
- CVE-2022-2486Critical 9.8A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3.wavlink · wl-wn535k2 firmwareEPSS30%1 exploitPublished Jul 20, 2022
- CVE-2021-43711Critical 9.8The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters.totolink · ex200 firmwareEPSS38%1 exploitPublished Jan 4, 2022
- CVE-2020-10548Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection.rconfig · rconfigEPSS37%1 exploitPublished Jun 4, 2020
- CVE-2020-10547Critical 9.8rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection.rconfig · rconfigEPSS37%1 exploitPublished Jun 4, 2020
- CVE-2019-8050Critical 9.8Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability.adobe · acrobat dcEPSS41%1 exploitPublished Aug 20, 2019
- CVE-2019-7442Critical 9.8An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system.cyberark · enterprise password vaultEPSS40%1 exploitPublished May 8, 2019
- CVE-2019-1913Critical 9.8Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating…cisco · sf-220-24 firmwareEPSS26%1 exploitPublished Aug 7, 2019
- CVE-2019-18370Critical 9.8An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.mi · millet router 3g firmwareEPSS40%1 exploitPublished Oct 23, 2019
- CVE-2019-16124Critical 9.8In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.youphptube · youphptubeEPSS28%1 exploitPublished Sep 8, 2019
- CVE-2018-6580Critical 9.8Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla!janguo · jimtawlEPSS36%1 exploitPublished Feb 2, 2018
- CVE-2018-19986Critical 9.8In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices.d-link · dir-818lw firmwareEPSS42%1 exploitPublished May 13, 2019
- CVE-2017-12786Critical 9.8Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…noviflow · noviwareEPSS25%1 exploitPublished Aug 22, 2017
- CVE-2015-1730Critical 9.3Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS29%1 exploitPublished Jun 9, 2015
- CVE-2015-0097Critical 9.3Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability."microsoft · excelEPSS41%1 exploitPublished Mar 11, 2015
- CVE-2014-6363Critical 9.3vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption…microsoft · internet explorerEPSS28%1 exploitPublished Dec 10, 2014
- CVE-2014-2782Critical 9.3Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,…microsoft · internet explorerEPSS22%1 exploitPublished Jun 19, 2014
- CVE-2014-2776Critical 9.3Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,…microsoft · internet explorerEPSS22%1 exploitPublished Jun 11, 2014
- CVE-2014-1806Critical 10.0The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel…microsoft · .net frameworkEPSS40%1 exploitPublished May 14, 2014
- CVE-2014-1764Critical 10.0Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging "object confusion" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.microsoft · internet explorerEPSS38%1 exploitPublished Apr 27, 2014
- CVE-2013-3162Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3115.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3161Critical 9.3Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3153Critical 9.3Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3148.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3150Critical 9.3Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3145.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3149Critical 9.3Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3148Critical 9.3Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3153.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3147Critical 9.3Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3145Critical 9.3Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3150.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2013-3115Critical 9.3Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3162.microsoft · internet explorerEPSS25%1 exploitPublished Jul 10, 2013
- CVE-2012-5965Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5964Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5963Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5962Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)portable sdk for upnp project · portable sdk for upnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-5961Critical 10.0libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)libupnp project · libupnpEPSS37%1 exploitPublished Jan 29, 2013
- CVE-2012-0163Critical 9.3Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a…microsoft · .net frameworkEPSS38%1 exploitPublished Apr 10, 2012
- CVE-2011-1999Critical 9.3Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability."microsoft · internet explorerEPSS27%1 exploitPublished Oct 11, 2011
- CVE-2010-3967Critical 9.3Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading…microsoft · windows movie makerEPSS20%1 exploitPublished Dec 16, 2010
- CVE-2010-3749Critical 9.3The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this…realnetworks · realplayerEPSS26%1 exploitPublished Oct 18, 2010
- CVE-2010-1900Critical 9.3Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle…microsoft · officeEPSS40%1 exploitPublished Aug 11, 2010
- CVE-2010-0231Critical 10.0The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote…microsoft · windows 2000EPSS41%1 exploitPublished Feb 10, 2010
- CVE-2009-1868Critical 9.3flash-plugin: multiple code execution flaws (APSB09-10)adobe · airEPSS21%1 exploitPublished Jul 30, 2009
- CVE-2009-0553Critical 9.3Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in…microsoft · internet explorerEPSS41%1 exploitPublished Apr 15, 2009
- CVE-2008-0115Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."microsoft · excelEPSS39%1 exploitPublished Mar 11, 2008
- CVE-2008-0114Critical 9.3Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.microsoft · excelEPSS39%1 exploitPublished Mar 11, 2008
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-4978 | A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. netgear · dgnd3700 firmware | Critical 9.3 | 21% | 1 exploit | |
| CVE-2024-38289 | A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate to the application, via crafted SQL input. rhubcom · turbomeeting | Critical 9.8 | 41% | 1 exploit | |
| CVE-2024-29974 | UNSUPPORTED WHEN ASSIGNED The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute arbitrary code… zyxel · nas326 firmware | Critical 9.8 | 23% | · | |
| CVE-2024-24116 | An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm. ruijie · rg-nbs2009g-p firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2023-34800 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main. dlink · go-rt-ac750 firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2022-46476 | D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function. dlink · dir-859 a1 firmware | Critical 9.8 | 41% | 1 exploit | |
| CVE-2022-28573 | D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. dlink · dir-823 pro firmware | Critical 9.8 | 28% | 1 exploit | |
| CVE-2022-2486 | A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. wavlink · wl-wn535k2 firmware | Critical 9.8 | 30% | 1 exploit | |
| CVE-2021-43711 | The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. totolink · ex200 firmware | Critical 9.8 | 38% | 1 exploit | |
| CVE-2020-10548 | rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 37% | 1 exploit | |
| CVE-2020-10547 | rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. rconfig · rconfig | Critical 9.8 | 37% | 1 exploit | |
| CVE-2019-8050 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. adobe · acrobat dc | Critical 9.8 | 41% | 1 exploit | |
| CVE-2019-7442 | An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system. cyberark · enterprise password vault | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-1913 | Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating… cisco · sf-220-24 firmware | Critical 9.8 | 26% | 1 exploit | |
| CVE-2019-18370 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. mi · millet router 3g firmware | Critical 9.8 | 40% | 1 exploit | |
| CVE-2019-16124 | In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code. youphptube · youphptube | Critical 9.8 | 28% | 1 exploit | |
| CVE-2018-6580 | Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! janguo · jimtawl | Critical 9.8 | 36% | 1 exploit | |
| CVE-2018-19986 | In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. d-link · dir-818lw firmware | Critical 9.8 | 42% | 1 exploit | |
| CVE-2017-12786 | Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are… noviflow · noviware | Critical 9.8 | 25% | 1 exploit | |
| CVE-2015-1730 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 29% | 1 exploit | |
| CVE-2015-0097 | Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability." microsoft · excel | Critical 9.3 | 41% | 1 exploit | |
| CVE-2014-6363 | vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption… microsoft · internet explorer | Critical 9.3 | 28% | 1 exploit | |
| CVE-2014-2782 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773,… microsoft · internet explorer | Critical 9.3 | 22% | 1 exploit | |
| CVE-2014-2776 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782,… microsoft · internet explorer | Critical 9.3 | 22% | 1 exploit | |
| CVE-2014-1806 | The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel… microsoft · .net framework | Critical 10.0 | 40% | 1 exploit | |
| CVE-2014-1764 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging "object confusion" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. microsoft · internet explorer | Critical 10.0 | 38% | 1 exploit | |
| CVE-2013-3162 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3115. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3161 | Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3153 | Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3148. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3150 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3145. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3149 | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3148 | Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3153. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3147 | Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3145 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3150. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2013-3115 | Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3162. microsoft · internet explorer | Critical 9.3 | 25% | 1 exploit | |
| CVE-2012-5965 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5964 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5963 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5962 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) portable sdk for upnp project · portable sdk for upnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-5961 | libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681) libupnp project · libupnp | Critical 10.0 | 37% | 1 exploit | |
| CVE-2012-0163 | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a… microsoft · .net framework | Critical 9.3 | 38% | 1 exploit | |
| CVE-2011-1999 | Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability." microsoft · internet explorer | Critical 9.3 | 27% | 1 exploit | |
| CVE-2010-3967 | Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading… microsoft · windows movie maker | Critical 9.3 | 20% | 1 exploit | |
| CVE-2010-3749 | The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this… realnetworks · realplayer | Critical 9.3 | 26% | 1 exploit | |
| CVE-2010-1900 | Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle… microsoft · office | Critical 9.3 | 40% | 1 exploit | |
| CVE-2010-0231 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote… microsoft · windows 2000 | Critical 10.0 | 41% | 1 exploit | |
| CVE-2009-1868 | flash-plugin: multiple code execution flaws (APSB09-10) adobe · air | Critical 9.3 | 21% | 1 exploit | |
| CVE-2009-0553 | Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in… microsoft · internet explorer | Critical 9.3 | 41% | 1 exploit | |
| CVE-2008-0115 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability." microsoft · excel | Critical 9.3 | 39% | 1 exploit | |
| CVE-2008-0114 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption. microsoft · excel | Critical 9.3 | 39% | 1 exploit |
Showing 501–550 of 755
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Scored between the two publication thresholds. Each keeps its scores and scope, and moves up the moment new exploitation evidence arrives.